CVE-2013-5641

CVE-2013-5641 describes a denial-of-service vulnerability affecting Asterisk Open Source versions 1.8.17.x through 1.8.22.x, 1.8.23.x before 1.8.23.1, and 11.x before 11.5.1, as well as Certified Asterisk 1.8.15 before 1.8.15-cert3 and 11.2 before 11.2-cert2. An unauthenticated remote attacker can exploit this flaw by sending a specially crafted ACK with SDP to a previously terminated channel, leading to a NULL pointer dereference, segmentation fault, and daemon crash. This vulnerability has a CVSS score of 5.0, indicating a medium severity with low attack complexity and no authentication required, resulting in a partial impact on availability. There is no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.